Re: [malware-list] [RFC 0/5] [TALPA] Intro to a linux interfaceforon access scanning

jmorris
2008-08-06T01:27:17Z

On Tue, 5 Aug 2008, Rik van Riel wrote:

> What exactly are the threat models you want to protect against?
>
> Once we have the answer to that question, we can figure out
> whether the current patch set addresses the threat model or
> whether alternate approaches are needed.

Alas, we've been here before.

http://article.gmane.org/gmane.linux.kernel/608634

On Thu, 29 Nov 2007, Al Viro wrote:

> Incidentally, I would really love to see the threat profile we are
> talking about.

Exactly.

Please come up with a set of requirements that can be reviewed by the
core kernel folk, and perhaps then focus on how to meet those requirements
once they have been accepted.

To be very clear, so we don't waste any _more_ time and effort on this:

The anti-malware folk need to first provide a clearly understandable and
complete description of the problem including a characterization of the
threat.

The next step is to propose a design which addresses the problem, and to
clearly and completely demonstrate how it does so.

Only then will it be possible to conduct an informed discussion on the
underlying case for malware scanning and its possible implementation.

- James
--
James Morris
<jmorris@namei.org>